yichen-web-research
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 在该 Skill 的横纵研究模式中,运行时会先生成离线 brief/plan,再由
$yichen-unified-search打开候选原文并“逐主张核对”;该模式的assemble_hengzong_evidence.py仅对已由搜索/归档层提供的结构化 bundle 做离线门控,不会自行主动读取外部自由文本。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata